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(54) Method for sealing containers and for ensuring their correct allocation to a preset user, and 
device for performing the method 

(57) A method for sealing containers and ensuring 
their correct allocation to a preset recipient user, which 
conprises: allocation of a recognition code to a user or 
to a service center; generation of an electronic key that 
is unique for the user or service center; loading or filling 
one or more containers of products to be transferred 
either from the user to a service center or from the serv- 
ice center to a user; sealing of the package or container 
by means of an electronic seal that includes an electronic 
locking device, in which identification data of the con* 
tained product and of the recipient and control codes are 
stored; transfer of the container or containers to the 
recipient user; execution of a recognition procedure by 
means of the electronic key of the recipient user, and, in 
case of positive outcome of the recognition procedure, 
authorization for access to tiie product in the container 
or containers. 
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Description 

The present invention relates to a method fa sealing 
containers, in particular blood bags, test-tubes contain- 
ing samples for laboratory tests and tiie like, and for 5 
ensuring their correct allocation to a preset user, such 
as a specific patient, or a specific laboratory, and to a 
device for performing this method. 

In hospitals it is often necessary to allocate to a spe- 
cific patient a type of blood or a specific blood product io 
that has been prepared specifically for that patient. 

Obviously, a mistake in allocation can cause severe 
harm and even tiie patient's death. 

Human error is the most frequent causa of acute 
fatal hemolytic reactions in blood transfusion and may 75 
occur in procedures concerning either the taking of blood 
samples or the distrSxition and/or transfusion of blood 
units. 

The aim of tiie present invention is to provide a 
method that can ensure a very high degree of safety, so 20 
as to in practice eliminate the occun'ence of mistakes in 
recognizing or allocating a container intended for a pre- 
set user. 

Witiiin the scope of tiiis aim, a specific object of tiie 
present invention is to provide a metfiod ttiat allows to 25 
seal tiie container with the possibility of memorizing and 
identifying or recognizing the recipient user, so as to pre* 
vent opening unless a special identification or recogni- 
tion procedure that authaizes the redpient to have 
access to the contents has given a positive result. 30 

Another object of tiie present invention is to provide 
a sealing device suitable for releasing, upon request, a 
nunt^er of information data such as tiie Kind of test to be 
carried out on the contents of a container sealed by the 
device, laboratory test standards followed or to comply 3S 
witii, type of taken sample, kind of request to be satisfied 
or answer to be given, date, time and name of the send- 
ing fonA/arding operator, details on the recipient, and the 
like information. 

Anottier object of tiie present invention is to provide 40 
a sealing device tiiat is highly reliable, since it allows to 
standardize recognition procedures, frees them from 
subjective decisions, is relatively easy to manufacture at 
competitive costs, and is simple and practical to use. 

According to a first aspect of tiie present invention, 45 
a method is provided for sealing containers and ensuring 
their connect allocation to a preset recipient user, said 
method comprising the following operating steps: 

- allocating an identification or recognition code to so 
a sending user or to a service center; 

- generating an electronic key that Is unique for a 
recipient user or service center; 

~ loading or filling one or more containers witii prod- 
uct or products to be transferred eitiier from tiie ss 
sending user to a service center or from the service 
center to the recipient user; 

- sealing the package or container by means of an 
electi-onic seal tiiat includes an electronic locking 



device, in which identif ication data of tiie contained 
. products, of tiie recipient user and transport instmc- 
tion data are stored; 

~ tiansferring tiie container or containers to the 
rec'9)ient user; 

- performing an Identification or recognition proce- 
dure by means of the electronic key of the recipient 
user, and, in case of positive outcome of tiiis proce- 
dure 

- auttiorizing access to tiie product in the container 
or containers, and 

- recording of information data on tiie followed rec- 
ognition and assess procedure. 

According to anotfier aspect of tiie present inven- 
tion, a device for sealing containers and ensuring tiieir 
correct allocation to a preset recipient user is provided 
and Is characterized in tiiat it comprises: 

~ at least one electronic seal for containers of prod- 
ucts or materials to be allocated to the recipient user 
or to a service center or transport operations, said 
seal comprising mechanical coupfing means and 
electronfo locking means having a memory unit for 
said mechanical means; 

- means for generating electronic keys; 

" at least one electronic key that can be pro- 
grammed with information data such as Identifica- 
tion data of tiie redpient user; 

- cont'd means adapted to perform a comparison 
between data stored in said electronic locking 
means and data contained in the or each electronic 
key: and 

- means for accessing and entering codes in the 
control means. 

Further aspects and advantages of the present 
invention will become apparent from tiie following 
description of a currently prefened but not exclusive 
embodiment thereof, illustrated only by way of non-limit- 
ing example in the accompanying drawings, wherein: 

figure 1 is a schematic view of a module for tiie elec- 
tronic control of a box or container for blood trans- 
port; 

figure 2 is a view of an input data module, in tiie form 
of an alphaniBTieric keyt>oard. and of a badge 
reader, to be connected to tiie module of figure 1 ; 
figure 3 is a view of an Identification or recognition 
device for patient test-tut)es containing laboratory 
test samples for a patient; 
figure 4 is a view of an electronic key and of a key- 
generating module; 

figure 5 is a view of a box-like seal for tiansporting 

a container, such as a blood bag; 

figure 6 is a view of an electronic toddng module of 

a seal, such as that of figure 5; 

figure 7 is a flowchart of tiie control software of tiie 

control module of figure 1 ; 
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figure 8 is a flowchart of the control software of the 

recognition device of figure 3; 

figure 9 is a flowchart of the control software of the 

locking module of figure 6; 

figure 10 shows a flowchart illustrating the general 

method according to the present invention; and 

figure 11 is a flowchart of a control software for a 

safety reception procedura 

A specific embodiment of a sealing device according 
to the present invention is described below with specific 
reference to bag-like containers, particularly for trans- 
porting blood and blood products. 

It will be noted that the device according to the inven- 
tion conrprises several components that can be con- 
nected to one another and are desabed in greater detail 
hereinafter. 

With reference to figures 1 to 6. a control module or 
apparatus 1 is schematically shown which comprises an 
electronic circuit 11. rechargeable batteries 12an^anged 
to power the circuit 1 1 , a printer 1 3. and an LED 1 5 for 
indicating the ON state and the charge status of the bat- 
tery 12. The control apparatus 1 also has a number of 
connectors, i.e.. a connector 19 for connection to a bat- 
tery charger (not shown), a connector 16 for connection 
to an electronic key 50 (figure 4), a connector 1 7 for con- 
nection to a box-like seal or transportation container 6 
(figure 5), a connector 18 for connection to a data Input 
module 30 and/or 35 (figure 2), and a connector 14 for 
connection to a key-generating module 55 (figure 4). 

The control apparatus 1 is meant to checkthe match 
between the code of the recipient user, e.g. a patient, 
stored in an electronic key 50, and the allocation code 
stored in the box-like seal or transportation container 6. 
In case of a match, the apparatus 1 enables unlocking 
of the box-like seal or container 6. The control module 1 
is controlled by suitable software, a flowchart of the same 
is shown in figure 7 and its functtons will be explained 
hereinafter. 

Rgure 2 shows a data input module 30 that com- 
prises an alphanumeric keyboard 33, a connector 31 for 
connection to the control module 1 . and a badge reader 
35 provided with a connector 36 for direct connection to 
the control module 1 (if the keyboard in the module 30 is 
missing) or for connection to a connector 32 of the mod- 
ule 30. in order to have both data input means available. 
The modules 30 and 35 are arranged to transfer the oper- 
ator's personal code or other Information data, which can 
be numeric or alphanumeric, to the control means 1 . 

The badge reader 35 can be of the magnetic type or 
of the type suitable for reading chip-cards. 

Figure 3 illustrates a module 4 for identifying sam- 
ples (for example test-tubes) for canying out tests on the 
patient, which comprises an electronic circuit 40, a 
printer 44, e.g. a single-sheet printer, a connector 41 for 
connection to the control module 1, a connector 42 for 
connection to an external optical reader (not shown), a 
connector 43 for connection to an external module (not 
shown) for locking the samples (test-tubes) to be tested 



in a laboratory, an internal optical reader 45, mechanical 
retaining means 47. for example of the clamping type for 
the test-tubes, and a reader 46 (located inside the mod- 
ule) for detecting the presence or absence of material in 

5 the test-tube held by the retaining means. 

Power to the test sample identification module 4 for 
samples to be tested is supplied by the control nxxlule 
1, to which the module 4 must be connected by means 
of the connector 41. The module 4 has the function of 

10 controlling the drawing of sample material (e.g. blood) 
from a patient, to whom an electronic personal identifi- 
cation key 50 has already been allotted. Once compari- 
son between the code of the key 50 and the label on the 
container (test-tube) is positive, the module 4 locks the 

75 container in position by means of the clamping means 
47. 

After the test-tube has been filled with blood as a 
consequence of direct drawing from the patient the mod- 
ule 4 prints a report that filing has occurred on a com- 

20 panion sheet and unlockthe test-tUbe to allow its removal 
for being sent to a laboratory 

The operator, by using the keytx>ard 33. can select 
the type of information to be coded (e.g. on a bar code) 
on the container or test-tube. e.g. the kind of test to be 

25 carried out and test data requested, type of drawn sam- 
ple, identification code of the operator and the like. Auto- 
matic application of date, hour, etc. can be provided, if 
desired. 

Further information data, such as personal kientifi- 
30 cation data of the patient and codes of the operations 
and/or functions selected by the operator can also be 
printed eitfier in coded form or in alphanumeric cards on 
a sheet that wilt accompany the transportation container. 

The sample identification module 4 is controlled by 
35 a specific control software, the flowchart of which Is 
shown in figure 8 and the functions of which will be 
described hereinafter. 

As shown in figure 4. an electronic key 50 com- 
prises: 

40 a connector 51 for connection to tiie key-generating 
module 55 or to the control module 1 ; a memory chip 52 
tiiat stores the patienf s coded data, and a slit 53 for a 
strap (not shown) for securing ttie key. for example to the 
patient's wrist. The electronic key 50 stores a personal 

45 code of the patient, which includes for example the noso- 
logical code and the date of birth of tiie patient or can 
contain previously stored numerals for identifying a spe- 
cific set (key plus sample container) to be tested. 
The electronic key 50 has the function of activating 

so tiie unlocking of the box-like transportation seal 7 by 
means of tiie control module 1 , according to tiie metiiod 
described hereinafter. 

The key-generating module 55 Is provided witfi a 
connector 59 for connection to the key 50, with an elec- 

55 fronic circuit 57 fed by batteries 58 or by external mains 
tiirough a suitable feeder, and vAth a connector 56 for 
connection to a personal computer or to the control mod- 
ule 1. The key-generating module 55. when connected 
to an electronfo key 50, stores therein the personal code 
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of the patient, under the control of a software avaOable 
in the PC or through the control module 1 . 

The kx>x-llke sea) 6 (figure 5) is provided with a mem- 
ory circuit and with connectors, i.e., a connector 61 for 
connecting it to the control nrKxiule 1 and an additional 
sendee connector 62 for performing circuit tests with the 
aid of an external unit (not shown). 

A solenoid 63 is arranged inside the box-like seal 6 
and is ananged to mechanicady lock and unlock the box 
6 to allow removal of the blood or blood product from the 
bag that has been sealed by said seal. 

The seal 6 can be released In emergency by means 
of screws 64. The screws 64 are arranged under a 
removable label (for example a metallic label) that makes 
it possible to detect any tampering of the box-like seal 6. 
The seal 6 is locked in closed position after a bag of Wood 
or blood product, allocated to a preset patient, has been 
sealed Inside it. Authorization to open the box-like seal 

6 is given by means of the control module 1, after per- 
forming an allocation checking procedure has been per- 
formed as explained in more detail hereinafter. 

The seal 6 is locked in closed position by means of 
the locking module 7 (figure 6), which comprises a mem- 
ory circuit 71 that is powered by batteries 72 that can be 
recharged by means of an external battery charger (not 
shown) or by means of an external power supply (not 
shown). The connection to the battery charger or to the 
power supply occurs by means of an appropriate con- 
nector 74. A LED 73 is provided on the locking module 

7 to indicate whether the device is ON and to Indicate 
the charging status of the battery 72. There are also two 
connectors 75 and 76, one of whk:h is used for connec- 
tion to an external processing unit, not shown, such as 
a PC. \ 

The seal 6 constitutes a passive electric means pro- 
vided with memory circuits and with circuits for control- 
ling the solenoid 63, in which the data for allocation to a 
specific patient remain stored. 

The seal 6 can be controlled by the locking module 
7 by means of a PCthat Is provided with a suitable control 
software, the flowchart of which is shown in figure 9 and 
the functions of which will be deserved hereinafter. 

The operation of the above described sealing device 
is as follows: 

in a ward, a preset patient code, for example a 
patient's nosological code including date of birth, etc., Is 
generated by means of the key-generating module 55 
and is stored in an electronic key 50 that can be physi- 
cally allocated to the patient, for example by applying it 
to his wrist by means of a strap of self-sealing type. 

If required, the device then prints patient's identifi- 
cation labels, unit requests with the identification data of 
the patient, any specific activity to be performed on the 
sample, etc.. 

A blood or blood product supply center, after receiv- 
ing a request for allocation of a bag of blood for a given 
patient, identifies a bag of blood or blood product that 
has the requested properties. 



Sealing of the bag is then performed with the elec- 
tronic tx)x-like seal 6. while said seal is connected to the 
locking module 7 through the respective connectors 61 
and 75. The module 7 can be connected to an external 

5 processing unit (not shown) via its connector 76. The 
tocking module 7, by energizing the solenoid 63, causes 
locking of the seal 6 and stores the unlocking code (that 
is to say, the t>ag code, the recipient code, and the control 
code) in the seal 6 which is now secured to or around 

10 the bag. The bag thus sealed is fontvarded to the patient, 
for example delivered to the ward in which the patient is 
hospitalized. 

The control of this function is performed in the soft- 
ware of the external processing unit, e.g. a PC, and by 
75 the software inside the locking module 7, which will be 
described in greater detail hereinafter with reference to 
figure 9. 

The product code is first entered in the external 
processing unit (step 120) which reads out any stored 

20 data (step 1 20 A) and stores the read out data either into 
a fOe (stage 120B) and/or into the memory of a module 
1 (stage 1 20C). The processing unit effects then the nec- 
essary comparisons (step 120D) and after that the code 
of the recipient user (step 121) Is entered. If provided for, 

25 the operator code is entered (step 1 22) by means of the 
entry module 30 and/or 35. Subsequently the control 
code for mutually checking the product code and the 
recipient user (patient) code, generated in the module 7 
and meant to be transferred into the seal 6 (step 123), is 

30 generated. The previous cods and the data stored in the 
memory of the seal 6 are read (step 124) and stored in 
an appropriate external history file (for example on a PC) 
(step 125). If required, information for a redpient labora- 
tory or other Klentification data concerning the forward- 

35 ing center or control data can be stored (step 126A). In 
step 126 the box-like seal 6 is focked by energizing the 
closure solenoid 63 (figure 5). The codes previously gen- 
erated by the locking module 7 are then recorded in the 
seal 6 (step 127) and re-read in step 128. If the compar- 

40 ison (step 129) is positive, the codes are stored in an 
external input history file (step 130) and the process 
ends by restoring the routine (step 131). If the compari- 
son is negative, the focking module 7 unlocks the seal 6 
and requests the entire procedure to be repeated (step 

45 132). 

In the ward, the comparison between the code of the 
electronic key 50 and the codes contained in the elec- 
tronic box-like transportation seal 6 is performed by 
means of the control module 1 . 

50 If the comparison is positive, the control module 1 
authorizes the opening of the tx2x-like seal 6, thus allow- 
ing to use the contents of the bag. 

Othenwlse. unlocking does not occur and the seal 
cannot be opened. H is also possible to provide for an 

55 emergency opening of the bag. In any case, appropriate 
messages are printed by means of the printing machine 
or printer 13, as described hereinafter with reference to 
figure 7. 
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More particularly, the control module 1 1s switched 
on (step 1 00) and the circuit between the electronic key 
50 and the box-like seal 6 is ctosed by means of the 
respective connectors 16 and 17 (figure 1). 

If provided for. the operator code is entered (step 
101) by means of the entry module 30 and/or 35; if said 
code is recognized, the user code is read in the electronic 
key 50 (step 102). then both the product code and the 
user code are read in the electronic seal 6, where the 
control code "X" is also read (step 103). A control code 
y is generated in the subsequent step 104 from the 
product code read in the seal 6 and from the code read 
in the electronic k^ of the patient; then a conparison 
between these control codes "X" and "Y" is performed in 
the subsequent step 105. Directly after this (step 106). 
the date and time are read in the suitably provided clock 
in the control module 1. The step 107 shows the three 
possibilities that arise from the comparison in step 104. 

If the control codes "X" and "Y" are identical, the allo- 
cation is correct, and therefore a message containing a 
report of normal opening, the date, the time, the product 
code, the user code in the seal 6, and the code of the 
electronic key of the patient is printed in step 1 08. and a 
signal authorizing the opening of the box-like seal 6 is 
generated in the subsequent step 109, whereas during 
the sut)sequent step 110 said codes and the operator 
code are stored in the memory of the seal 6 or in the key 
50. and the operation ends (step 111). 

If the control codes "X" and "Y" differ, this means that 
the allocation is incon^ect and therefore a message that 
contains the indication of an error in recipient user code 
and date, time, product code, sending user code in the 
seal 6, and the code of the electronic key of the patient 
Is printed in step 1 12. The history data of the event are 
stored in the seal 6 or in the key 50 in step 1 13. and the 
operation ends (step 1 14). 

If the control codes "X" and "V are different but the 
code of the key has a preset emergency value, the emer- 
gency opening status is recognized. A message that 
contains the emergency opening Indication, date, time, 
product code, user code in the seal, code of the elec- 
tronic key. and code and identification data of the key 
owned by the person in charge, is printed in step 1 15: 
The box-like seal 6 is then opened in step 1 16 and the 
said codes and the operator code are stored in said mod- 
ule in step 117. 

The operation ends in the subsequent step 118. 
where the control module 1 is switched off. as in steps 
111 and 114. 

At a center where enfipty and Incoirectly allocated 
containers or bags are gatiiered. the container code is 
read and the device is unlocked (step 1 11 A) and if print- 
ing out of such code is required, this is done at 1 1 1 B. 
Then, all information data are memorized (step 11 1C) 
and/or stored in a file in an external PC at step 1 1 1 D and 
checked. 

A way in which the control module 1 and the module 
4 can be used for identifying samples of material to be 
subjected to chemical analysis is described hereinafter. 



For convenience, reference is made to the requirements 
of a hospital ward with respect to a laboratory or trans- 
fusion center. 

Blood samples, drawn in the ward from a specific 

5 patient, are to be delivered to a transfusion center for 
analysis. Also in this case it is necessary to guarantee 
accurate identification of the blood sample that belongs 
to a given patient. As explained above, it is necessary to 
prepare beforehand a key 50 for identifying the patient 

10 and a test-tube labelled with the same code. 

Should the comparison between the code of the key 
50 owned by the patient euid the label on the container 
be positive, the empty container is fixed by means of the 
retaining means 47 and the comparison result is printed 

IS on the label of the container. Only after the container has 
been filled as a consequence of a blood drawing from 
the patient, the container is released for being forwarded 
to the transfusion center. 

This process is controlled by the software (see flow- ' 

20 chart of figure 8) of the module 4 for identifying samples 
of blood or of other material to be analyzed, whose func- 
tions are as follows. 

The identification modiile 4 is switched on (steps 
139 and 140) by means of the connection of the elec- 
ts tronic key 50 and of the container of the material to the 
control module 1. If provided for. the entry module 30 
and/or 35 is used to enter the code of the operator (step 
141); only If said code is identified, the code of the elec- 
tronic key 50 is read (step 1 42). 

30 A check operation for spotting errors and in particu- 
lar for making sure that the test tube is tiie correct one 
is effected at step 142A. Should tiie test tube be a wrong 
one. a further check operation is performed at step 142B 
to determine whether identification code of tiie ward or 

35 laboratory is stored in ttie key 50. If yes, then such a code 
is digitized in tiie key 50 (step 142) and memorized; if 
not. or after storing of tiie code, information data availa- 
ble in the key are displayed and/or printed at step 142D. 
At stage 143 a number of assessments are automat- 

40 ically performed, i.e. without intervention of tiie operator, 
on the blood sample, e.g. the kind of test required, iden- 
tification of the laboratory responsible for carrying outthe 
test details on the laboratory tests, modalities of blood 
taking, amount of blood required for the test, conditions 

45 for transporting the sample, type of answer, etc.. A check 
for en'ors is made at stage 143A. whereas at step 143, 
tiie internal optical reader is used to read tiie code of the 
container of tfie material (for example test-tube), and 
other desirable information data and in step 144 a oom- 

50 parlson is made between tiie code of the electrortic key 
50 and tiie code of tiie pre-labeled test-tube. 

If the comparison fails, a message containing an 
enror indication, the date, the time, the code of tiie user 
key, tiie code of tiie container, and tfie code of tfie oper- 

65 ator (step 145) is printed on the label of tiie test-tube, 
and the process ends. 

If the comparison is positive, tiie container is blocked 
by tiie retaining means 47 (step 1 46) of tiie module 4 for 
identifying ttie samples of material. The reader 48 ttien 
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checks for the presence of material in the container (step 
147). and if there Is liquid or other material in it the date 
and time are read in step 148. 

At step 1 49 printing is performed on the label of the 
container. e.g. indicating the date, the time, the code of s 
the container, the code of the recipient user, and option- 
ally the code of the operator and the required tests on 
sample. Checking is performed to spot errors at stage 
1 49A. for punching document at stage 1 49B. for updating 
information data on the key 50 at stage 149C, whereas io 
data storing in the key is effected at step 149D. 

At step 1 50. the container is then released, and the 
date, the time, the code of the electronic key, and the 
code of the contsuner are printed on the companion 
request form. After storing in an appropriate file in the is 
control module 1 (step 151), the process ends. 

The above described method makes it possible to 
ensure conect Identification of samples of material to be 
tested that originate from a well identified patient, with . 
the possibility of reporting on any identification errors by 20 
printing appropriate messages, on the whole file history 
of both the container, its contents and the sample in the 
test tube. 

The labels used to kJentify the various containers 
can have bar codes that can be read with optical readers 25 
preset for bar codes. 

Figure 10 diagrammatically illustrates the main 
sequence of events according to tfie method of the 
present invention. 

Rrst of all. the sending user or operator and a recip- 30 
lent user or laboratory are identified by a specific code, 
that is also stored in an electronic key (step 200). Then, 
identification data of a container and the material (e.g. 
blood) to be filled in the container and transfened and 
any treatinent operation to be sequentially performed on 3S 
the material are memorized on an electronic seal for the 
container at step 201. 

At step 202 tiie container is filled or loaded, seated 
by means of an electronic seal and delivered to a reclp* 
lent user or laboratory. A recognition procedure designed 40 
to check the information data concerning tiie operator 
responsible for the transportation, date, hour, place of 
delivery, etc.. is canried out at step 203 by making use of 
the mennorized electronic key. whereas unlocking of the 
container and access to the material contained in it is 4s 
performed on step 201 . 

Should the container be delivered to a laboratory or 
sendee center, an automatic safety reception procedure 
can be performed as Illustrated in figure 11. 

The code of the transportation operator is checked so 
at step 205. The (bar) code on a test tube 47 accompa- 
nying the container is read out at step 206 and informa- 
tion as to place, date. hour, receiving operator code, etc.. 
are added to the label at step 207. The whole bulk of 
such added information data is stored in a memory at ss 
step 208 and at step 209 the same information data are 
printed out on a sheet and placed on a file (step 210). 



At step 211, the container, if empty, is stored in a 
storeroom for sut>sequent utilization, or fonvarded to a 
processing unit, e.g. testing unit, or filling unit 

The device according to the invention is susceptible 
of numerous mocfifications and variations within the 
scope of the invention. 

Where technical features mentioned in any claim are 
followed by reference signs, tiiose reference signs have 
been Included for the sole purpose of Increasing the intel- 
ligibility of the claims and accordingly such reference 
signs do not have any limiting effect on the interpretation 
of each element identified by way of example Isy such 
reference signs. 

Claims 

1. Metiiod for sealing containers and ensuring their 
correct allocation to a preset recipient user, charac- 
terized in tiiat It comprises the following operating 
steps: 

- allocating an identification or recognition code 
to a sending user or to a service center; 

- generating an electronic key that is unique for 
a user recipient or service center; 

- loading or filling one or more containers with 
product or products to be transferred either from 
the sending user to a service center or from the 
service center to tiie recipient user; 

- sealing ttie package or container by means of 
an electronic seal tiiat includes an electronic 
locking device, in which identification data of the 
contained product(8) of the recipient user and 
control codes are stored ; 

- transferring the container or containers to tiie 
recipient user; 

- performing an Identification or recognition 
procedure by means of tiie electronic key of the 
recipient user, and, in case of positive putcome 
of this procedure; 

- authorizing access to tiie product in the con- 
tainer or containers; and 

~ recording of information data on the identifi- 
cation and assess procedures followed. 

2. Metiiod according to claim 1. characterized in ttiat 
said loading or filling comprises identification by 
means of a control device of tiie electronic key and 
of a service container, botii of which are pre-coded, 

" comparison of tfie data of ttie service con- 
tainer witfi tiiose of the electronic key; 

- printing of the data concerning the outcome 
of the comparison and consequent valkiation or 
invalidation of the container; 

- securing of the container so as to fix It to the 
conti'ol device before loading; 

- loading or filling of the container; and 
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- printing of data related to the outcome of the 
operation. 

3. Method according to claim 2. characterized in that 
said loading or filling operation comprises: 

" reading the container content code by means 
of an external processing unit; 

- entering the code of the recipient user; 

" activating a sealing procedure by means of 
locking means that are provided with memory 
unit allowing bidirectional transfer of codes and 
data and creation of control codes, and 

sealing of the container by means of elec- 
tronic sealing means. 

4. Method according to any one of the preceding 
claims, characterized in that said recognition or 
identification procedure comprises: 

- reading the data of the container by means of 
the control device; 

comparing the read data with the data of an 
electronic key of the recipient user; 

- printing the data obtained from the outcome 
of the comparison and consequent authoriza- 
tion to or prevention from opening the electronic 
seal; and 

- storage of the operation outcome data 

5. Method according to daim 4, characterized in that it 
comprises entering operator code in the control 
device. 

6. Method according to any one of the preceding 
claims, characterized in that in case of identification 
failure following the recognition procedure, a proce- 
dure for emergency unlocking of the electronic seal 
is followed. 

7. Device for sealing containers and ensuring their cor- 
rect allocation of to a preset recipient user, charac- 
terized in that it comprises: 

- at least one electronic seal for containers of a 
product(s) or material(s) to be allocated to the 
recipient user or to a service center or transpor- 
tation operator, said seal comprising mechani* 
cal coupling means and electronic locking 
means having a memory unit for said mechan- 
ical means; 

- means for generating electronic keys; 

- at least one electronic key that can be pro- 
grammed with information data such as kienti- 
f ication data of the recipient user; 

- control means tiiat are adapted to perform a 
comparison between data stored in saki elec- 
tronic locking means and data contained in the 
or each electronic key; and 



- means for accessing and entering codes in 
the control means. 

8. Device according to daim 7, characterized in tiiat 
5 saki code entry and access means comprise an 

alphanumeric teyboard. 

9. Device according to daim 8, characterized in that 
said code entry and access means comprise a 

10 badge reader. 



1 0. Device according to any one of daims 7 to 9. diar- 
acterized in that said electronic seal comprises an 
actuation solenokJ. 

11. Device according to daim 10, characterized in that 
said electronic seal comprises a box-like body that 
can be opened and dosed for receiving mechanical 
locking means and electronic t)locking means. 
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1 2. Device according to daim 10 or 11 , characterized in 
tiiat it comprises a processing unit that can be con- 
nected to saki eledronic UocMng means. 

1 3. Device according to any one of daims 7 to 1 2. char- 
acterized in ttiat sad confa'ol means comprise at 
least one printer. 

14. Device according to any one of claims 7 to 13, char- 
acterized in that it comprises means for Identification 
of containers for the material to be analyzed, said 
means including at least one reader for reading data 
available on ttie container, means for comparing the 
data read on the container and the data stored in an 
eledronic key. and a printer for printing the data of 
the comparison. 
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